Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a393632313a3a2f34382d3438203d3e2030.roa
File: 326130353a646663313a393632313a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier: bSikg7I4XkOdf8HiByg2whcAMDqyUZi3xncO0KtX5V0=
Subject key identifier: 94:B2:F4:B0:93:BB:25:8C:5F:E5:8C:47:CD:9C:33:BF:9F:30:C6:2A
Certificate issuer: /CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Certificate serial: 3F206E62052F86311578A0234F96E18393CA00D6
Authority key identifier: 13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a393632313a3a2f34382d3438203d3e2030.roa
Signing time: Thu 22 Feb 2024 14:47:56 +0000
ROA not before: Thu 22 Feb 2024 14:42:56 +0000
ROA not after: Thu 20 Feb 2025 14:47:56 +0000
asID: 0
IP address blocks: 2a05:dfc1:9621::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 08 Mar 2024 18:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:20:6e:62:05:2f:86:31:15:78:a0:23:4f:96:e1:83:93:ca:00:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Validity
Not Before: Feb 22 14:42:56 2024 GMT
Not After : Feb 20 14:47:56 2025 GMT
Subject: CN=94B2F4B093BB258C5FE58C47CD9C33BF9F30C62A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:86:8f:75:c4:19:3c:89:67:6e:2b:3c:f4:
c6:96:4e:e6:aa:8e:5b:3f:ca:f2:6b:13:64:e1:24:
52:c6:26:25:a3:d1:ca:a7:3f:94:6d:67:1a:a2:62:
f7:4b:15:15:8c:ce:78:e3:cb:e5:d4:ca:d4:2e:88:
bb:00:da:2e:ab:4c:7b:33:7b:8c:3d:a8:53:f6:c9:
ce:ce:da:b7:84:a2:93:cb:53:46:c5:f8:5f:51:e7:
12:91:79:e4:f1:3c:2e:64:13:6c:87:90:10:82:8f:
c5:62:83:b8:40:57:8d:15:67:01:4d:79:6c:25:5a:
d5:87:e3:57:16:e3:1f:b3:6b:b8:7f:c3:14:0b:d3:
92:ae:7f:80:47:f5:e0:43:72:79:6f:38:13:7f:a4:
96:21:94:24:b8:4e:89:78:5b:ee:c2:7f:7a:92:78:
77:ac:b1:cf:1c:19:37:c9:15:f8:e1:e1:87:87:8d:
45:62:4d:1f:8b:30:87:32:6a:6c:64:5a:dd:3f:70:
92:a0:8a:6f:31:79:a9:bc:5e:38:d3:07:a1:ff:fc:
df:0c:52:cd:c0:2d:87:89:5f:21:be:20:26:0f:45:
e7:be:60:41:88:75:b2:e7:22:91:28:45:7a:7c:b1:
1e:e7:52:5c:92:8d:26:8a:22:5d:3d:b1:70:d4:b8:
be:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B2:F4:B0:93:BB:25:8C:5F:E5:8C:47:CD:9C:33:BF:9F:30:C6:2A
X509v3 Authority Key Identifier:
keyid:13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a393632313a3a2f34382d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc1:9621::/48
Signature Algorithm: sha256WithRSAEncryption
a2:cb:0a:31:ce:8b:af:01:e9:57:d8:5a:6e:13:60:ce:c7:a9:
ef:45:46:08:79:28:2a:eb:2a:e0:96:b8:80:3a:36:00:cd:4f:
64:b5:7a:f0:0a:e0:47:2d:a9:65:5c:dd:78:a2:c1:d3:ae:92:
d6:11:60:10:b2:52:5f:b3:a6:d3:03:3a:89:36:7c:43:75:fc:
7d:5c:d5:ca:d2:d9:c2:09:95:e9:9c:ae:0e:5c:9e:bd:8a:ba:
b3:4f:0d:75:87:f3:d6:65:d0:67:7f:30:95:2f:e5:47:bd:56:
cc:f5:e6:42:66:d6:89:28:17:08:df:d2:c5:34:61:16:5f:c8:
1a:23:f4:5b:71:84:eb:c2:ac:75:93:0d:21:b4:30:6b:7f:d2:
e5:37:81:aa:75:d4:6c:26:d1:23:a0:aa:33:b1:b8:60:99:7b:
b7:c6:21:d7:46:21:86:e4:62:9d:cc:f8:e1:6f:f2:02:54:98:
c7:16:11:f5:13:0e:9f:08:78:04:43:d8:3c:80:47:bd:c5:0f:
47:dd:9f:a7:5a:05:fd:43:87:4a:99:da:35:8b:8e:4c:10:f5:
17:ad:86:b2:fd:7f:21:28:07:a2:1b:e8:fa:f7:31:78:ea:1f:
95:af:ed:4b:a0:78:33:d7:c5:4e:ff:ea:45:fc:43:db:08:e4:
63:2f:bb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:16 2024 by rpki-client on console-fra.rpki-client.org